Add -D directory option to tools/findlog.sh

Signed-off-by: Frank Filz <ffilz@us.ibm.com>
Strip explicit permission checking from FSAL_GPFS

Permission checking will be done uniformly up in Cache_Inode layer.

Signed-off-by: Frank Filz <ffilz@us.ibm.com>
Strip explicit permission checking from FSAL_PT

Permission checking will be done up in cache_inode_setattr

This is the FSAL_PT equivalent of commits:
e202b2344dea80d59220cec64879b31c9216667c

Signed-off-by: Frank Filz <ffilz@us.ibm.com>
Strip explicit permission checking from FSALs: HPSS, LUSTRE, POSIX, VFS, XFS

Permission checking will be done uniformly up in Cache_Inode layer.

Signed-off-by: Frank Filz <ffilz@us.ibm.com>
Add fsal_set_credentials to fsal_symlink for FSAL_GPFS

Use fsal_set_credentials to avoid needing to chown the symlink.

Signed-off-by: Frank Filz <ffilz@us.ibm.com>
Fix permission checking on READDIR

Do not provide handle or attributes if directory does not have SEARCH permission.

Do not provide attributes for a file if file does not have READ_ATTR permission
(this is a no-op if there is not NFS v4 ACL on the file).

Signed-off-by: Frank Filz <ffilz@us.ibm.com>
Make getattr optional with cache_inode_lookup and cache_inode_create

Not all callers of cache_inode_lookup need the attributes and we
are going to check permissions on getattr so it will be good to
not ask for them if we won't use them.

Signed-off-by: Frank Filz <ffilz@us.ibm.com>
Don't get attr via nfs_FhandleToCache if we don't need them

Signed-off-by: Frank Filz <ffilz@us.ibm.com>
Properly permission check cache_inode_getattr

Signed-off-by: Frank Filz <ffilz@us.ibm.com>
Properly permission check cache_inode_lookup

Also check object type correctly.

Signed-off-by: Frank Filz <ffilz@us.ibm.com>
Add some debug to cache_inode_access

Signed-off-by: Frank Filz <ffilz@us.ibm.com>
Strip unused fsal_check_access_by_mode from FSAL_GPFS

Signed-off-by: Frank Filz <ffilz@us.ibm.com>
Properly permission check cache_inode_create

Signed-off-by: Frank Filz <ffilz@us.ibm.com>
NEEDS WORK Improve permission checking in cache_inode_remove

This still needs work because also have to permission
check the file, and check S_ISVTX

Signed-off-by: Frank Filz <ffilz@us.ibm.com>
Improve permission checking in cache_inode_link

Signed-off-by: Frank Filz <ffilz@us.ibm.com>
Introduce COMMON_test_access

Signed-off-by: Frank Filz <ffilz@us.ibm.com>
Use COMMON_test_access to strip lots of code

Signed-off-by: Frank Filz <ffilz@us.ibm.com>
Strip Use_Test_Access option

Ganesha really depends on doing all permission checking, we will not
defer permission checking to the underlying file system.

Signed-off-by: Frank Filz <ffilz@us.ibm.com>

Conflicts:

	src/Cache_inode/cache_inode_access.c
Remove local op routines from FSAL_TEMPLATE

The routines in FSAL/common_methods.c should be used unless they must be
overode.

Signed-off-by: Frank Filz <ffilz@us.ibm.com>
Use COMMON_setattr_access for FSAL_PROXY

Signed-off-by: Frank Filz <ffilz@us.ibm.com>